Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/VFXvPQx5NO6vQTJ0eu2OpJ3Avls.roa
File:                     VFXvPQx5NO6vQTJ0eu2OpJ3Avls.roa (raw, json)
Hash identifier:          I+zvtSY0ZO7qIoMO9oehFyu9egHyir2sDAu4KAZfY9Y=
Subject key identifier:   54:55:EF:3D:0C:79:34:EE:AF:41:32:74:7A:ED:8E:A4:9D:C0:BE:5B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0153
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VFXvPQx5NO6vQTJ0eu2OpJ3Avls.roa
Signing time:             Fri 28 Oct 2022 06:07:52 +0000
ROA not before:           Fri 28 Oct 2022 06:07:52 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        175.135.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 06:07:52 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=5455EF3D0C7934EEAF4132747AED8EA49DC0BE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:29:3e:34:e8:7a:c7:d5:de:0a:6e:bc:5a:
                    80:1c:95:4e:2d:26:ed:e8:8b:b2:75:3c:aa:0d:b1:
                    65:13:10:a3:eb:14:02:57:ba:0e:39:e8:8e:46:26:
                    16:ae:8e:2b:b7:84:ba:b7:bc:01:5e:12:0d:e8:1d:
                    9c:25:e9:fa:33:c1:ae:7b:2b:ec:c0:0c:27:42:5e:
                    df:18:ad:d3:7f:f9:38:b7:e0:2a:6c:3f:14:71:da:
                    27:9f:7f:8f:c8:59:45:65:63:31:4c:3e:0a:82:cb:
                    55:5e:12:1b:9a:28:14:28:5e:41:8e:e1:d1:07:ba:
                    66:52:96:ff:91:8e:01:d6:76:17:d9:20:26:86:84:
                    c5:74:3a:9a:da:df:a5:b5:0b:f5:c2:67:ac:b8:4b:
                    44:0b:4f:b7:3f:c0:71:65:ac:80:cc:ee:e3:eb:83:
                    8b:13:a5:03:b6:d4:5f:f3:00:5f:47:ba:d9:ee:16:
                    c0:83:e8:0d:7a:a2:8c:56:47:67:3b:a7:b2:e0:00:
                    2f:3f:54:5f:78:86:32:61:83:ae:69:a0:28:9b:22:
                    46:5e:e7:be:27:0a:4b:77:6f:5c:c2:07:a9:32:85:
                    f0:9d:9a:7b:4c:c8:58:19:5f:bd:ad:a4:e0:95:2f:
                    ca:cd:cf:2b:1a:16:41:90:ca:b2:7f:fd:f9:c7:b2:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:55:EF:3D:0C:79:34:EE:AF:41:32:74:7A:ED:8E:A4:9D:C0:BE:5B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VFXvPQx5NO6vQTJ0eu2OpJ3Avls.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:4c:7b:70:83:a6:b6:cc:9c:d2:bc:1b:27:64:32:e5:1a:1f:
         aa:62:f8:48:25:c4:b9:e7:a8:9f:cc:08:66:60:15:ee:c3:74:
         da:f3:c3:82:3a:ae:39:4b:fc:74:f1:68:50:d9:9a:fd:28:2c:
         af:49:2b:af:73:bc:b2:b1:79:d5:a4:73:6c:01:d8:10:ff:34:
         d4:ae:28:2f:e2:f5:c5:af:7c:68:84:1c:c5:83:ac:c1:19:5c:
         28:da:54:18:bb:c7:69:4b:6d:ef:a0:3f:b7:15:0d:84:20:75:
         11:b5:87:88:d9:22:6f:07:ce:68:38:ec:e5:01:b3:fb:2e:c6:
         40:d2:20:ba:70:a8:00:e1:02:4c:45:ae:84:9c:94:95:26:85:
         4f:48:88:51:39:1c:2d:19:13:9e:ef:b0:3c:eb:9a:53:30:97:
         d3:e6:c1:31:d6:d2:c2:12:90:b0:fb:ae:0b:16:7d:12:99:3b:
         2b:5e:16:4b:e6:00:38:99:df:b3:3e:c9:5a:35:ce:1d:95:b7:
         86:c1:c3:a3:88:81:2e:e7:2f:27:6d:f8:51:9c:2d:13:a3:83:
         3a:53:69:48:13:e8:42:c7:88:04:f9:ba:5d:54:37:09:33:2a:
         ed:34:cc:2a:22:8d:c1:fc:84:05:6f:ae:77:e9:4b:41:16:de:
         5e:78:01:36
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjEwMjgw
NjA3NTJaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU0NTVFRjNEMEM3OTM0
RUVBRjQxMzI3NDdBRUQ4RUE0OURDMEJFNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChACk+NOh6x9XeCm68WoAclU4tJu3oi7J1PKoNsWUTEKPrFAJX
ug456I5GJhaujiu3hLq3vAFeEg3oHZwl6fozwa57K+zADCdCXt8YrdN/+Ti34Cps
PxRx2ieff4/IWUVlYzFMPgqCy1VeEhuaKBQoXkGO4dEHumZSlv+RjgHWdhfZICaG
hMV0Opra36W1C/XCZ6y4S0QLT7c/wHFlrIDM7uPrg4sTpQO21F/zAF9HutnuFsCD
6A16ooxWR2c7p7LgAC8/VF94hjJhg65poCibIkZe574nCkt3b1zCB6kyhfCdmntM
yFgZX72tpOCVL8rNzysaFkGQyrJ//fnHshxhAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUVFXvPQx5NO6vQTJ0eu2OpJ3AvlswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1ZGWHZQUXg1Tk82dlFUSjBldTJPcEozQXZscy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCvhzANBgkqhkiG9w0BAQsFAAOCAQEAAUx7cIOmtsyc0rwbJ2Qy5RofqmL4
SCXEueeon8wIZmAV7sN02vPDgjquOUv8dPFoUNma/Sgsr0krr3O8srF51aRzbAHY
EP801K4oL+L1xa98aIQcxYOswRlcKNpUGLvHaUtt76A/txUNhCB1EbWHiNkibwfO
aDjs5QGz+y7GQNIgunCoAOECTEWuhJyUlSaFT0iIUTkcLRkTnu+wPOuaUzCX0+bB
MdbSwhKQsPuuCxZ9Epk7K14WS+YAOJnfsz7JWjXOHZW3hsHDo4iBLucvJ234UZwt
E6ODOlNpSBPoQseIBPm6XVQ3CTMq7TTMKiKNwfyEBW+ud+lLQRbeXngBNg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org